Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/612105ef-38bf-365d-9922-7e01bdbeacdc.roa
File:                     612105ef-38bf-365d-9922-7e01bdbeacdc.roa (raw, json)
Hash identifier:          lVwr12jUV5OmH3LlOaw6s0htvABC3jpNqPYAHunegkY=
Subject key identifier:   DF:95:6C:19:06:7D:35:18:B9:2B:42:87:C4:5E:FF:FE:72:FF:86:FE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF26E5E53911B8C76A280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/612105ef-38bf-365d-9922-7e01bdbeacdc.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4dd0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f2:6e:5e:53:91:1b:8c:76:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=44e46a69-2946-42f1-bdf8-dc1693dffada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a2:57:f1:97:c2:1d:ae:8d:bf:e8:d0:e1:68:
                    d3:f0:32:49:58:a3:f2:c0:19:22:01:18:c2:71:49:
                    44:66:d1:6b:87:62:8b:b5:5e:66:d2:ff:21:f3:af:
                    89:fe:c6:f4:ef:2c:ee:09:e2:cd:6f:97:ca:a1:29:
                    1a:43:43:f2:b0:1b:cf:46:f1:1a:73:bd:7d:4f:62:
                    d9:0e:55:96:69:cb:7c:e1:89:40:f2:c9:9a:f3:49:
                    d7:80:77:a3:48:ab:aa:49:5a:18:f8:5a:96:b0:a5:
                    04:34:a2:bc:78:ff:a1:54:42:fb:56:fb:95:c2:e1:
                    71:31:ae:6e:83:4d:03:c9:3e:fb:b5:6d:14:34:11:
                    ca:97:55:20:cf:82:2e:03:47:ee:7c:aa:f1:64:0f:
                    87:bf:b6:5c:ad:3c:9f:f3:75:97:78:fc:1f:a3:6a:
                    1d:ad:8b:1b:b1:57:3b:bd:f8:59:2b:62:3e:0c:2c:
                    80:ea:68:1a:62:1e:50:6e:f7:4b:7c:ca:d3:9e:e1:
                    1b:3d:66:5d:a4:3e:4a:1a:ef:7a:f0:0c:f7:44:88:
                    9e:4e:7d:27:f8:46:73:75:50:1d:9c:cd:6e:c7:1b:
                    ea:8c:e2:d7:e1:95:9c:0f:fd:65:0c:c8:4a:98:da:
                    4f:79:7f:d2:a8:34:8f:c1:d4:e8:95:66:6a:7a:98:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:95:6C:19:06:7D:35:18:B9:2B:42:87:C4:5E:FF:FE:72:FF:86:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/612105ef-38bf-365d-9922-7e01bdbeacdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4dd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:97:a5:82:6d:81:7c:04:72:1f:5e:89:cf:ce:83:53:35:
         7e:8e:17:8a:c1:95:25:0e:4a:43:33:d6:71:53:72:4d:f2:19:
         07:1c:66:a6:c7:17:b1:54:f8:89:74:ce:85:a9:4a:9f:d0:45:
         79:04:bb:c0:d6:a0:e7:8e:f6:2f:1d:31:d0:16:6a:4e:48:4f:
         57:64:6c:33:45:6f:ac:50:89:e6:10:39:6f:5e:e0:fe:39:e4:
         53:3a:9a:7e:01:7b:2d:fb:32:ff:27:bc:39:e0:78:64:85:8c:
         16:b0:81:2a:15:d1:a9:a4:fa:22:ce:ae:12:ea:0b:af:4e:78:
         9e:ec:ae:dc:be:12:f2:ee:0a:90:9f:69:47:71:d9:07:73:b7:
         08:18:64:bb:94:5b:64:e6:fa:0a:a0:d0:cb:8a:ee:26:a8:06:
         d0:bf:86:68:56:b7:16:9b:0f:de:b2:63:95:84:ec:8a:37:9d:
         f6:e4:3b:8c:b3:63:07:64:5e:0f:19:ab:ec:cd:6a:20:93:eb:
         56:98:89:f2:1e:16:f5:7e:d9:25:82:ca:5d:fc:be:6c:46:69:
         34:ea:45:cf:5f:5d:26:0c:16:1d:d3:5f:28:bb:62:23:95:bb:
         59:63:0d:1f:4d:88:57:c8:65:7b:b3:4d:b3:02:11:b1:b2:66:
         96:e7:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----